chuanhuchatgpt multipart boundary DoS vulnerability (CWE-400) fix report

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Type: CWE-400: Uncontrolled Resource Consumption - Vulnerability Name: DOS in multipart boundary while uploading the file in gaizhenbiao/chuanhuchatgpt - Vulnerability Status: Fixed 2. Vulnerability Impact: - Affected Version: 20240628 - Severity: High (7.5) - Vulnerability Type: Network Attack - Exploit Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Confidentiality: None - Integrity: None - Availability: High 3. Vulnerability Exploitation: - Exploitation Method: By appending a large number of characters at the end of the multipart boundary, causing the server to endlessly process these characters, leading to service unavailability. - Exploitation Example: - Use Burp Suite to intercept the upload request, append a large number of characters, and send the request. - Append a large number of characters to make the server endlessly process them, resulting in service unavailability. 4. Vulnerability Fix: - Fix Status: Fixed - Fix Date: 20240918 - Fix Commit: 919222 5. Vulnerability Disclosure: - Disclosure Status: Disclosed - Disclosure Date: 2 months ago 6. Vulnerability Discoverer: - Discoverer: M Nadeem Qazi - Discoverer ID: @mnqazi 7. Vulnerability Validator: - Validator: Chuan Hu - Validator ID: @gaizhenbiao 8. Vulnerability Reward: - Disclosure Reward: $450 - Fix Reward: $112.5 9. Vulnerability Report Status: - Report Status: Resolved - Report Date: July 1, 2024 This information provides a detailed overview of the vulnerability’s nature, impact, exploitation method, remediation, and associated rewards.

Goal Reached Thanks to every supporter — we hit 100%!

chuanhuchatgpt multipart boundary DoS vulnerability (CWE-400) fix report